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MEMORANDUM FOR: Chief, fngineering Division, OC 
Chief, Foroigen Networks Division, OC 


Chief, 25X1A 
FROM : 

Chief, Communications Division, OC 
SUBJECT : Recommended Security Enhancements for 

ARS and MAXCON [—] 25X1 


1. [__]The attached MFR is the product of a cursory 
single fault analysis of the Automated Relay System (ARS) and 
MAXCON output circuitry. The analysis was performed by 
OC-CSD/EAB with OC-RD/CPS assistance. The simulation of a 
Single fault, as described in paragraph 4, clearly demonstrates 
the potential for a conpromise of classified information. 


2. [_] We request that the paragraph 6 alternatives 
and procedures bo implemented as enhancements to the security 
of the ARS and NAXCON systems. Implementation of these 
enhancements will effectively double tho protection apainst 
the possibility of a compromise ef classified information. The 
hardware changes recommended are a matter of straping and can 
be effected in a relatively short period of time. The software 
changes should not be difficult since there is no apparent 
need for unique software development, 
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b. Buss Addresses 7670008 and 767400g are used for 
Maxcon/Record Channel interfacing. 


Given a and b, there is no known addressing conflict. 


25X14 8. [_] This analysis has been confined primarily to the 
LCM, due to the fact that there are software/hardware addressing 
alternatives. An indepth analysis of a Single LTU addressing 
failure was not made, since there are no alternatives to the 
existing LTU software/hardware addressing structure. Any change 
in this structure would require a redesign of the LTU integrated 
circuitry. 
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Attachment: 
Automated Relay System Addressing Structure, Figures 1,2,§3 
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25X1 6. [__] The following alternative addressing and operational 
procedures will enhance the security of the ARS. 


a. By selectively choosing the LCM/LTU software/ 
hardware addresses, ARS security protection will be doubled. 
These addresses are: 


Buss Address Bits 


BA 11 10 9 8 


LCM 1 0 0 0 0, 760002, 
LCM 2 0 0 1 1, 761402g 
LCM 3 0 1 1 0, 763002, 
LCM 4 d Oi. wt 705. <3 7650029. 
LCM 5 ct 1 0 0, 766002, 


Given the proposition that each "1" and "0" represents 

an integrated circuit, it is obvious that two IC failures 
vice one, would be required to produce the conditions 
described in the preceding paragraphs i.e., compromise 

of classified information. 


b. Security may be further enhanced by a vertical 
re-alignment of station/LTU assignments according to 
category of traffic i.e., all LTU 0's for other agency, 

25xX1 all LTU 1's for etc. It is recognized that this 
enhancement may not be totally possible/practical. 


c. Failures of this nature, produce an audible network 
alarm and LTU failure printouts at the circuit control 
position. The ARS SOP should include instructions for 
the communicator to immediately remove the LCM associated 
with the LTU failure printouts. This will disable the 
entire shelf. 


7. The above changes should also be incorporated in the 
MAXCON (Max Concentrator). It should be noted that: 


a. In the basic C900 (Collins 900) System, Buss 
Addresses 760000g through 762400g are used for CLCM 
(Communications Link Control Module) and TLCM (Trunk Link 
: Control Module) addressing. These Modules are not implemented 
in the ARS or the MAXCON. 
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